Privacy Policy

1. Who We Are

Lynceus, LLC ("Lynceus," "we," "our," or "us") operates the Lynceus Coding Compass platform, accessible at www.lynceuscodingcompass.com. We provide an ICD-10-CM coding reference tool for medical coders, billers, CDI specialists, and healthcare professionals.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Lynceus, you agree to the practices described here.

2. Information We Collect

a. Information You Provide

• Account registration: Email address, name, and password when you create an account.
• Billing information: Payment details (processed securely by Stripe; we do not store full card numbers).
• Communications: Messages you send us via email or support channels.
• Waitlist & beta signup: Email address and name if you join our waitlist or beta program.

b. Information Collected Automatically

• Usage data: Search queries, pages visited, features used, and interaction timestamps.
• Device & log data: IP address, browser type, operating system, and referring URL.
• Cookies and local storage: We use browser local storage to track session-level preferences (such as free-tier search count). We may use cookies for authentication sessions.

c. Information We Do Not Collect

Lynceus is a coding reference tool — we do not collect, store, or process patient health information (PHI), medical records, insurance claims, or any patient-identifiable data. No Protected Health Information (PHI) as defined under HIPAA is entered into or transmitted through our platform. We are designed to be used as a look-up reference only.

3. How We Use Your Information

• To provide, operate, and improve the Lynceus platform
• To manage your account and subscription
• To process payments via Stripe
• To send transactional emails (account creation, billing confirmations, password resets)
• To send product updates and announcements (you may opt out at any time)
• To analyze aggregate usage patterns and improve search accuracy
• To respond to support requests and communications
• To comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (U.S. Residents)

We process your personal information under the following bases:

• Contract: Processing necessary to provide the service you subscribed to
• Legitimate interests: Improving our platform, preventing fraud, and maintaining security
• Consent: Marketing communications (you can withdraw consent at any time)
• Legal obligation: Compliance with applicable laws and regulations

5. Third-Party Service Providers

We work with trusted third parties to operate our platform. These providers process data only on our behalf and under appropriate data protection agreements:

• Stripe: Payment processing. Stripe's Privacy Policy governs payment data handling.
• Email service provider: Transactional and marketing email delivery.
• Analytics: Aggregate, anonymized usage analysis to improve the product.
• Hosting infrastructure: Secure cloud hosting and database services.

We do not share your personal information with third parties except as necessary to provide our service, comply with law, or protect our rights.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or regulatory purposes.

Search query logs may be retained in aggregate, anonymized form for product improvement purposes.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS) for all data communications
• Encrypted storage for sensitive data
• Row-level security policies on all database tables
• Access controls limiting who can view personal data

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@lynceuscodingcompass.com.

8. Your Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@lynceuscodingcompass.com. We will respond within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information.

To submit a CCPA request, contact us at privacy@lynceuscodingcompass.com.

10. Children's Privacy

Lynceus is designed for healthcare professionals and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top and, for material changes, notify you by email or a notice on the platform. Continued use of Lynceus after changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact Lynceus, LLC at: